search

DuendeSoftware / Support

Support for Duende Software products
21 stars 0 forks source link

How to properly setup an oidc service to my Duende identityserver #1450

Closed robisonkarls closed 2 weeks ago

robisonkarls commented 1 month ago

Which version of Duende IdentityServer are you using? 7

Which version of .NET are you using? 8 Describe the bug No Bug, just general question.

At my company, we currently use an identity server (tokenService) as our token issuer. In addition, we are developing a new OpenID Connect (OIDC) provider (oidcService) as a separate service to act as our primary authentication provider.

I want to configure my client application to send authentication requests to the tokenService while specifying the identity provider (idp) as oidcService. When the tokenService detects idp=oidcService, it should automatically redirect the user to the external oidcService for authentication, allowing the user to log in properly.

RolandGuijt commented 1 month ago

This is possible with the Federation Gateway pattern. oidcService can be setup as an external identity provider for tokenservice.

With home realm discovery a idp can be specified. In your case, the third bullet point in the doc, section home realm discovery may be the solution.

AndersAbel commented 3 weeks ago

Did Roland's suggestion to use an idp:xxx acr_values work? Can we close this issue?

AndersAbel commented 2 weeks ago

Closing due to inactivity, please feel free to reopen and comment if needed.